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Abstract 

We investigate the effects of user cooperation on the secrecy of broadcast channels 
by considering a cooperative relay broadcast channel. We show that user cooperation 
can increase the achievable secrecy region. We propose an achievable scheme that 
combines Marton's coding scheme for broadcast channels and Cover and El Gamal's 
compress-and-forward scheme for relay channels. We derive outer bounds for the rate- 
equivocation region using auxiliary random variables for single-letterization. Finally, 
we consider a Gaussian channel and show that both users can have positive secrecy 
rates, which is not possible for scalar Gaussian broadcast channels without cooperation. 
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1 Introduction 



The open nature of wireless communications facilitates cooperation by allowing users to ex- 
ploit the over-heard information to increase achievable rates. However, the same open nature 
of wireless communications makes it vulnerable to security attacks such as eavesdropping 
and jamming. In this paper, we investigate the interaction of these two phenomena, namely 
cooperation and secrecy. In particular, we investigate the effects of cooperation on secrecy. 

The eavesdropping attack was first studied from an information theoretic point of view 
by Wyner in [2], where he established the secrecy capacity for a single-user degraded wire- 
tap channel. Later, Csiszar and Korner [3] studied the general, not necessarily degraded, 
single-user eavesdropping channel, and found the secrecy capacity. More recently multi-user 
versions of the secrecy problem have been considered for various channel models. Refer- 
ences [4-8] consider multiple access channels (MAC), where in [4,5] the eavesdropper is an 
external entity, while in [6-8] the users in the MAC act as eavesdroppers on each other. Ref- 
erences [9, 10] consider broadcast channels (BC) where both receivers want to have secure 
communication with the transmitter; in here as well, each receiver of the BC is an eavesdrop- 
per for the other user. References [11-16] consider secrecy in relay channels, where in [11-13], 
the relay is the eavesdropper, while in [14,15] there is an external eavesdropper. In [16], the 
relay helps the transmitter to improve its rate while it receives confidential messages that 
should be kept hidden from the main receiver. 

In a wireless medium, since all users receive a version of all signals transmitted, they 
can cooperate to improve their communication rates. The simplest example of a cooperative 
system is the relay channel [17] where the relay helps increase the communication rate of 
a single-user channel using its over-heard information. Multi-user versions of cooperative 
communication have been studied more recently. In [18], a MAC is considered where both 
users over-hear a noisy version of the signal transmitted by the other user, and transmit in 
such a way to increase their achievable rates. In [19-21], cooperation is done on the receiver 
side, where in a BC, one or both of the receivers transmit cooperative signals to improve the 
achievable rates of both users. 

Our goal is to study the effects cooperation on the secrecy of multiple users where secrecy 
refers to simultaneous individual confidentiality of all users. One of the simplest models to 
study this interaction is the cooperative relay broadcast channel (CRBC), where there is a 
single transmitter and two receivers, and each receiver would like to keep its message secret 
from the other user; see Figures [1] and [2l In this model, in order to incorporate the effects of 
cooperation, there is either a single-sided (Figure [1]) or double-sided (Figure [2]) cooperative 
link between the users. For clarity of ideas and simplicity of presentation, for a major part 
of this paper, we will assume a CRBC with a single-sided cooperation link from the first 
user to the second user. We will investigate the effects of two-sided cooperation in Section [HI 
Focusing on the single-sided CRBC, we note that if we remove the cooperation link, our 
model reduces to the BC with confidential messages in [9, 10], and if we set the rate of the 
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Figure 1: Cooperative relay broadcast channel (CRBC) with single-sided cooperative link. 



first user to zero, our model reduces to the relay channel with confidential messages in [11-13], 
and if we both set the rate of the first user to zero and remove the cooperation link between 
the users, our model reduces to the single-user eavesdropper channel in [2,3]. Our model is 
the simplest model (except perhaps for the "dual" model of cooperating transmitters in a 
MAC with per-user secrecy constraints [8]) that allows us to study the effects of cooperation 
(or lack there of) of the first user (the transmitting end of the cooperative link) on its own 
equivocation rate as well as on the equivocation rate of the other user (receiving end of the 
cooperative link). 

Our motivation to study this problem can be best explained in a Gaussian example. 
Imagine a two-user Gaussian BC. This EC is degraded in one direction, hence both users 
cannot have positive secrecy rates simultaneously [2,9,10]. This has motivated [10] to use 
multiple antennas at the transmitter in order to remove this degradedness in either of the 
directions and provide positive secrecy rates to both users simultaneously. We wish to achieve 
a similar effect with a single transmitter antenna, by introducing cooperation from one user 
to the other. Imagine now a Gaussian CRBC [19, 20] as in Figure [H where user 1 acts as 
a relay for user 2's message, i.e., that there is a cooperative link from user 1 to user 2. Let 
us assume that in the underlying BC, user 1 has a better channel. Without the cooperative 
link, user 2 cannot have secure communication with the transmitter. We show that user 1 
can transmit cooperative signals and improve the secrecy rate of user 2. Our main idea is 
that user 1 can use a compress-and-forward (CAF) based relaying scheme for the message of 
user 2, and increase user 2's rate to a level which is not decodable by user 1. This improves 
user 2's secrecy. Now, let us assume that in the underlying BC, user 1 has the worse channel. 
Without cooperation, user 1 cannot have secure communication with the transmitter. We 
show that user 1 can transmit a jamming signal in the cooperative channel first to guarantee 
a positive secrecy rate for itself assuming it has enough power. This essentially brings the 
system to the setting described in the previous case, and now user 1 can send a cooperative 
signal to user 2 to help it achieve a positive secrecy rate as well. 

In this paper, we propose an achievable scheme that combines Marton's coding scheme for 
BCs [22] and Cover and El Gamal's CAF scheme for relay channels [17]. A similar achievable 
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Figure 2: Cooperative relay broadcast channel (CRBC) with a two-sided cooperation link. 



scheme has appeared in [23] which does not consider any secrecy constraints, hence ours can 
be viewed as a generalization of [23] to a secrecy context. A similar achievable scheme also 
appeared in [11,13], where CAF is applied to a relay channel to provide improved secrecy for 
the main transmitter. A relay channel can be considered as a special case of the single-sided 
CRBC where the rate of the first user is set to zero. 

In this paper, we also develop a single-letter outer bound on the rate-equivocation region; 
we accomplish singe-letterization by using tools proposed in [3], namely by determining 
suitable auxiliary random variables. Besides this outer bound, for the second user, that is 
being helped in the single-sided CRBC, we develop another single-letter outer bound which 
depends only on the channel inputs and outputs. 

To visualize the effects of cooperation on secrecy, we consider a Gaussian CRBC and show 
that both users can have positive secrecy rates through user cooperation. To obtain positive 
secrecy rates for both users, we provide different assignments for the auxiliary random vari- 
ables appearing in the achievable rates. These auxiliary random variable assignments have 
dirty paper coding (DPC) interpretations [24]. In addition, we combine jamming and relay- 
ing to provide secrecy for both users when the relaying user is weak. Finally, we consider the 
CRBC with a two-sided cooperation link and provide an achievable scheme for this channel. 



2 The Channel Model and Definitions 

From here until the beginning of Section [HI we will focus on a single-sided CRBC, and refer 
to it simply as CRBC. The CRBC can be viewed as a relay channel where the transmitter 
sends messages both to the relay node and the destination. Therefore, one of the users, user 
1 in our case, in a CRBC both decodes its own message and also helps the other user. A 
CRBC consists of two message sets wi G Wi,W2 G VV2, two input alphabets, one at the 
transmitter x E X and one at user 1 Xi E Xi, and two output alphabets yi G 3^i,?/2 £ 3^2, 
where the former is for user 1 and the latter is for user 2. The channel is assumed to be 
memoryless and its transition probability distribution is p{yi, y2\x, Xi). 

A (2"^^, 2"-^^, nj code for this channel consists of two message sets as Wi = {l, . . . , 2"^^ j 
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and VV2 = {1, • • • ,2""^^}, an encoder at the transmitter with mapping Wi x W2 A"", a 
set of relay functions at user 1, xi^i = . . . , for 1 < i < n, two decoders, 

one at each user with the mappings gi : 3^" Wi and §2 : 3^^ —>■ VV2. The proba- 
bihty of error is defined as = max {Pg"]^, PJ^g} where P^'^ = Pi {gi{Y{') ^ Wi) , P^2 = 
Pr (5^2(^2'^) 7^ ^2). The secrecy of the users is measured by the equivocation rates which are 
^H(Wi\Y2) and j^H{W2\Y{' , X]'). Since user 1 has its own channel input, we condition the 
entropy rate of user 2's messages on this channel input. 

A rate tuple {Ri, R2, Re,i, Re,2) is said to be achievable if there exists a (2"-^i , 2"^^ , n) 
code with lim^^oo Pe — 

lim -HiWilY^'') > Re,i, lim - H {W2\Y;\ XI') > ^^,2 (1) 

n— »oo fl ' n— >oo fl ' 

3 An Achievable Scheme 

We now provide an achievable scheme which combines Marton's coding scheme for BCs [22] 
and Cover and El Gamal's CAF scheme for relay channels [17]. A similar achievable scheme 
has appeared in [23] without any secrecy considerations. In this scheme, user 1 sends a 
quantized version of its observation to user 2, which uses this information to decode its own 
message. The corresponding achievable rate-equivocation region is given by the following 
theorem. 

Theorem 1 The rate tuples {Ri, R2, Re,i, Re,2) satisfying 

Pi < I{V,;Y,\Xi) (2) 

R2 < I{V2;Y2,Yi\Xi) (3) 

R1 + R2 < I{V,;Y,\Xi) + I{V2;Y2,Y,\X,)-I{Vi;V2) (4) 

Re,l < Ri (5) 

Re,i < [l{V,;Y,\X,)-I{V,;Y2,Y,\V2,X,)-I{V,;V2)Y (6) 

Re,2 < R2 (7) 

Re,2 < [l{V2;Y2,Yi\X,)-I{V2;Yi\Vi,Xi)-I{Vi;V2 

are achievable for any distribution of the form 

p{vi, V2)p{x\vi, V2)p{xi)p{yi\xi, fl, yi)p{yi, y2\x, xi) (9) 
subject to the constraint 

/(Fi; FilXi, Vi) < I{Yi, Xi; Y2) (10) 

This theorem is a special case of Theorem [Hand obtained from the latter by setting U = Xi. 
Therefore, we will omit the proof of Theorem [1] here and will provide the proof of Theorem H] 
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in Appendix [Dl In ([6]) and ([8]), is the positivity operator, i.e., (x)"*" = max(0,x). 

Remark 1 We note that both the form of the probabihty distribution in (Q and the con- 
straint in (fTOj) in Theorem [1] are somewhat different than those of the classical CAF scheme 
in [17]. First, we condition the distribution of Yi on Vi to prevent the compressed version of 
Yi to leak any additional information regarding user I's message on top of what user 2 already 
has through its own observation. The constraint in ffTOl) also reflects this concern. Similar 
constraints on the distribution of Yi and on the compression rate have appeared in [23], 
where these modifications are not due to secrecy constraints contrary to here. In [23], these 
are imposed to obtain higher rates for user 2 by removing user I's private message from the 
compressed signal, whereas here, they are imposed not to let Yi leak any additional informa- 
tion regarding user I's message. Moreover, if we let user 1 compress its observation without 
erasing its own message from the observation, i.e., if we change the conditional distribution 
of Yi to p{yi\xi,yi), we can recover the constraint in [17] (see equations (29)-(31) in [23]). 

Remark 2 If we disable the assistance of user 1 to user 2 by setting Xi = Yi = (f), the 
channel model reduces to the BC with secrecy constraints, and the achievable equivocation 
region becomes 



where we require the Markov chain (Vi, V2) X ^ (Yi, Y2). This result was derived in [10]. 

Remark 3 If we disable both cooperation between receivers by setting Xi = Yi = 0, and 
also the confidential messages sent to user 1 by setting Vi = (/), the channel model reduces 
to the single-user eavesdropper channel, and the achievable equivocation rate for the second 
user becomes 



and the Markov chain V2 —>■ X ^ {Yi, Y2) is required by the probability distribution in iQ. 
This is exactly the secrecy capacity of the single-user eavesdropper channel given in [3]. 

Remark 4 If we disable the confidential messages sent to user 1 by setting Vi = 0, the 
channel model reduces to a relay channel with secrecy constraints, and the achievable equiv- 
ocation rate for the second user becomes 




(11) 
(12) 




(13) 




(14) 



subject to 




(15) 
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and the corresponding joint distribution reduces to p{v2, x)p(xi)p{yi\xi,yi)p{yi,y2\x, xi). 
Further, if we make the potentially suboptimal selection of V2 = X, the corresponding 
achievable secrecy rate and the constraint coincide with their counterparts found in [11] for 
the relay channel. 

Remark 5 By comparing the equivocation rates of the users in ([6]) and ([8]) and the equiv- 
ocation rates of the users in the corresponding BC given in ffTTl) and f|T2l) . we observe that 
the equivocation rate of user 1 may decrease depending on the information contained in Yi 
and the equivocation rate of user 2 may increase depending on the channel conditions. 

Remark 6 We will show in the next section, where we develop outer bounds for the rate- 
equivocation region, that if the channel of user 2 is degraded with respect to the channel 
of user 1 then i?e,2 = (see Remark [8]), where degradedness is defined through the Markov 
chain X {Xi,Yi) — > Y2. Here, we show, as an interesting evaluation, that this achievable 
scheme cannot yield any positive secrecy rates in this expected. 

I{V2; Y2, Yi\Xi) - I{V2; Y,\VuX,) - I{Vi; V2) 

< I{V2; Y2, Fi, V^\X^) - I{V2; Y^\V^, X^) - I{Vi; V2) (16) 
= I{V2; Y2, Yi\Vi, Xi) + I{V2; V,\X,) - I{V2; Yi\Vi, X^) - I{V,; V2) (17) 
= I{V2; Y2, Yi\Vi, Xi) - I{V2; Xi) (18) 

< I{V2; Y2, Fi, Fil V^i, Xi) - I{V2; Y^\V^, X^) (19) 
= I{V2;Y2,Yi\Vi,Xi) + I{V2;Y,\VuXuY,,Y2) - I{V2;Yi\Vi,X,) (20) 
= I{V2; Y2, Yi\Vi, Xi) - I{V2; Xi) (21) 
= I{V2;Y2\V,,X,,Y,) (22) 
= (23) 

where in ( ITSi) . we used the fact that Xi and (Vi,V2) are independent, i.e., /(Vi;V2|Xi) = 
HVi;V2), in dll]), we used the Markov chain (^2,^2) ^ {Vi,Xi,Yi) Yi which implies 
I{V2;Yi\Vi,Xi,Yi,Y2) = 0, and in ([23]), we used the Markov chain (^1,1^2) X ^ 
(Xi, Yi) ^ Y2 which is due to the assumed degradedness. 



4 An Outer Bound 

We now provide an outer bound for the rate-equivocation region. Our first outer bound in 
Theorem [2] uses auxiliary random variables. Next, in Theorem [3], we provide a simpler outer 
bound for user 2 using only the channel inputs and outputs, without employing any auxiliary 
random variables. 
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Theorem 2 The rate-equivocation region of the CRBC hes in the union of the following 
rate tupleil] 




(24) 
(25) 
(26) 



(27) 



where 




IiV^■Y^\U)-I{V,■Y2\U) 
I{V2;Y2\U)-I{V2;Y,\U) 
I{V,;Y,\V2) - I{V,;Y2\V2) 
I{V2;Y2\V,) ~ I{V2;Y,\V,) 



(28) 
(29) 
(30) 
(31) 



where the union is taken over all joint distributions satisfying the Markov chain 



U^{V^,V2)^{X,X^,Y,)^Y2 



(32) 



The proof of this theorem is given in Appendix |Al 

Remark 7 The bounds on the equivocation rates in Theorem [2] and those in [10], where 
the outer bounds are for the equivocation rates in a two-user BC with per-user secrecy 
constraints as in here, have the same expressions. The only difference between the two outer 
bounds is in the Markov chain over which the union is taken. The Markov chain in (J32l) 
contains the one in [10], which is 



which means that our outer bound here evaluates to a larger region than the one in [10]. 
This should be expected since the achievable rate-equivocation region here in our CRBC 
contains the achievable region in the BC. 

We also provide a simpler outer bound for the equivocation rate of user 2 which does not 
involve any auxiliary random variables. 

Theorem 3 The equivocation rate of user 2 is bounded as follows 



Unfortunately, in the conference version [1] of this paper, the outer bound appeared with some typos. 



U ^ {Vi,V2) ^ X ^ {Y,,Y2) 



(33) 



i?e,2 < max I{X;Y2\Xi,Yi) 



p{x,xi) 



(34) 
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The proof of this theorem is given in Appendix [Bl 

Remark 8 If the channel is degraded, then the equivocation rate of user 2 is zero, since 

IiX;Y2\X,,Y,) = (35) 

which follows from the Markov chain X — * {Xi,Yi) Y2 which is a consequence of the 
degradedness. 

Remark 9 We generally expect the outer bound in Theorem [3] to be loose because it essen- 
tially assumes that user 2 has a complete access to user I's observatioij^ whereas, in reality, 
user 2 has only limited information about user I's observation, which it obtains through 
the cooperative link. However, if the link from user 1 to user 2 is strong enough, user 1 
may be able to convey its observation to user 2 precisely in which case the outer bound in 
Theorem [3] can be close to the achievable rate obtained via the CAF scheme. For example, 
such a situation arises if the channel satisfies the following Markov chain 

X ^{Xi,Y2)^Yi (36) 

For such channels, by selecting V2 = X,Vi = Yi = (p in the achievable scheme, we get the 
following equivocation rate for user 2 

I{X; FslXi) - I{X; Y,\X^) = I{X; Y^, Y^\X^) - I{X; Y,\X^) = I{X; Y^lX^, Y^) (37) 

where the first equality is due to the Markov chain in (!36|) . Hence, the outer bound in (IMI) 
gives the secrecy capacity for channels satisfying (!36l) . 

Remark 10 Although we are able to provide a simple outer bound for the equivocation 

rate of user 2, that depends only on the channel inputs and outputs, finding such a simple 

outer bound for the equivocation rate of user 1 does not seem to be possible. One reason 

for this is that, user 1 can use its observation, i.e., Yi, for encoding its input, i.e., Xi, 

and create correlation between its channel inputs and outputs across time. Consequently, 

this correlation cannot be accounted for without using auxiliary random variables. Another 

reason will be discussed in Remark [T3l 

^In fact, this Sato- type [25] upper-bounding technique is used as a first step (before introducing noise 
correlation to tighten the upper bound) in finding the secrecy capacity of the MIMO wiretap channel [26-29] . 
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5 An Example: Gaussian CRBC 



We now provide an example to show how the proposed achievable scheme can enlarge the 
secrecy region for a Gaussian BC. The channel outputs of a Gaussian CRBC are 

Yi = X + Zi (38) 
Y2 = X + Xi + Z2 (39) 

where Zi ~ Ar(0, iVi), Z2 ~ Ar(0, N2) and are independent, E [X^] <P,E [Xf] < aP. In this 
section, we assume that N2 > Ni, i.e., user 1 has a stronger channel in the corresponding BC. 
Note that, in this case, if user 1 does not help user 2, e.g., in the corresponding BC, i?e,2 = 0. 
We present two different achievable schemes for this channel where each one corresponds 
to a particular selection of the underlying random variables in Theorem [T] satisfying the 
probability distribution condition in ([9]). Proposition [1] assigns independent channel inputs 
for each user, whereas Proposition [2] uses a DPC scheme. For simplicity, we provide only the 
achievable equivocation region in the following propositions. 

Proposition 1 The following equivocation rates are achievable for all a G [0, 1] 

where a = 1 — a and Nc is subject to 

^ N2iaP + N^) + PjaaP + N,) 

aP ^ ^ 

Proof: This achievable region can be obtained by selecting Vi ~ A/'(0, aP), V2 ~ A/'(0, aP), 
X = Vi + V2, Xi ~ Af{0, aP), Yi =Yi-Vi + Zc = V2 + Zi + Z, and Z^ ~ Af{0, N,), 
where Vi,V2,Xi and Zc are independent. The rates are found by direct calculation of the 
expressions in Theorem [1] using the above selection of random variables. ■ 

This achievable region can be enlarged by introducing correlation between Vi,V2. Since 
a joint encoding is performed at the transmitter, one of the users' signals can be treated as 
a non-causally known interference, and DPC [24] can be used. In the following proposition, 
the transmitter treats user 2's signal as a non-causally known interference. 
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Proposition 2 The following equivocation rates are achievable for any 7 and all a G [0, 1] 

I1 A (a7 + a)2p \ 1, / aP\ 1, 2" 

2 \ a + 7''a A*! + 7 — 1 raaP / 2 V Nr, 2 V 



a + 72a)A^i + (7 - l)2aaPy 2^V ^2 7 2 ^V 'a 
1 , aP{N, + N,) + a{l-^fP{aP + N,) \ 1 / aa(7 - 1)^^ 

«e,2 < - log I IH , ^ . w,. . I - - log I 1 + 



(43) 



2 {aP + N2){Nr + Nc) J 2 ^\ {a + -i'^a)Ni 

log (1 + 7'^) (44) 

where a = 1 — a and is subject to 

iV, > (45) 

where 

^ = a(a + 07^)^ (46) 

T^=[a + 7^a) PfaA^i + (1 - -ffaP{a + a)] - (P + A^2) [Ni{a + 7^0) + aa(7 - ifP] 

(47) 

u; = {(P + Ar2) [(1 - ^faP + A^i] - (1 - -ifa^P'^] [Ni (a + 7^0) + Paa(7 - 1)^} (48) 

Proof: These equivocation rates are obtained by applying DPC for user 1. Let the channel 
input of the transmitter he X = Ui + U2 where Ui ~ A/'(0, aP), f/2 ~ A/'(0,aP) and are 
independent. The auxiliary random variables are selected as V2 = U2,Vi = Ui + 7^/2, where 
for user 1, the signal of user 2 is treated as non-casually known interference at the transmitter. 
The channel output of user 1 is compressed as Yi = Yi — Vi + Zc = (1 — 7)^/2 + ^1 + -^c 
where ~ A/'(0, A^^^) is the compression noise. The channel input of user 1 is selected as 
Xi ~ A/'(0, aP). Here, again, Ui,U2,Zc and Xi are all independent. The rates are then 
found by direct calculation of the expressions in Theorem [1] using the above selection of 
random variables. ■ 

We note that, in both of the propositions above, Pe^2 is a monotonically decreasing 
function of Nc- Consequently, achievable Pe,2 depends on the quality of the cooperative 
link between the users. If this link gets better allowing user 1 to convey its observation 
in a finer form, user 2's secrecy increases. For illustrative purposes, the rate regions given 
by Propositions [1] and [2] are evaluated for the parameters P = 8, A^i = 1, A^2 = 2, and the 
corresponding plots are given in Figures [3] and |H Note that since N2 > Ni, if there was no 
cooperation between the users, user 2 could not have a positive secrecy rate. We observe 
from these figures that, thanks to the cooperation of the users, both users enjoy positive 
secrecy rates. However, we observe that a positive secrecy for user 2 comes at the expense 
of a decrease in the secrecy of user 1. 
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Figure 3: Achievable equivocation rate region for single-sided CRBC using Proposition [T] 
where Vi and V2 are independent. F = 8, A'"! = 1, A^2 = 2, i.e, user 2 has no secrecy rate in 
the underlying BC. 
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Figure 4: Achievable equivocation region for single-sided CRBC using Proposition [2] where 
Vi,V2 are correlated, admitting a DPC interpretation. P = 8, Ai = 1, A2 = 2, i.e., user 2 
has no secrecy rate in the underlying BC. 



12 



In particular, for both propositions, maximum secrecy rate for user 2 is achieved when 
user 1 does not have any message itself and acts as a pure relay for user 2. Similarly, user 1 
achieves the maximum secrecy rate when user 2 does not have any message. Furthermore, we 
note that, for both achievable schemes, as a oo, the equivocation rate of user 2 approaches 
a limit. This is due to the fact that, as a ^ cxd, the achievable equivocation rates are limited 
by the link between the transmitter and user 1. Moreover, as a oo, user 1 can send its 
observation to user 2 perfectly. Thus, in this case, user 2 can be assumed to have a channel 
output of (Yi,Y2), which makes the channel of user 1 degraded with respect to the channel 
of user 2. Consequently, following the analysis carried out in Remark [9], we expect the outer 
bound in Theorem [3] to become tight as a — oo, which is stated in the next corollary. 

Corollary 1 As a — oo, the maximum achievable equivocation rate for user 2 becomes 

iS., = ilog (l + P (i- + i-)) - ilog (l + (49) 
The proof of this corollary is given in Appendix O 



6 Joint Jamming and Relaying 

The proposed achievability scheme and its application to Gaussian CRBC show us that 
user cooperation can enlarge the secrecy region. However, this achievability scheme and 
the Gaussian example provide us with only a limited picture of what can be achieved. In 
particular, the achievability scheme proposed in Section [3] is designed with the cooperating 
user (user 1) being the stronger of the two users in mind. Next, we want to explore what 
can be done when the cooperating user (user 1) is the weaker of the two users. In this 
case, without the cooperative link, user 1 cannot have a positive secrecy rate. Therefore, 
the first question to ask is, whether user 1 can have a positive secrecy rate by utilizing the 
cooperative link. The answer to this question is positive if user 1 uses the cooperative link to 
send a jamming signal to user 2. However, a more interesting question is whether both users 
can achieve positive secrecy simultaneously. The following theorem provides an achievable 
scheme, where user 1 performs a combination of jamming and relaying, to provide both users 
with positive secrecy rates. 
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Theorem 4 The rate quadruples {Ri, R2, Re,i, Re,2) satisfying 



Ri 


< 


R2 


< 


+ R2 


< 


Re,l 


< 


Re,l 


< 


Re,2 


< 


Re,2 


< 



I{Vi; FilXi) - I{Vi; Y2, ¥^{¥2, U) - I{Vi; V2) 
I2 

I{V2; Y2, Fi|f/) - I{V2; Y^\V^, X^) - I{V,; V2) 



are achievable for any distribution of the form 



(50) 
(51) 
(52) 
(53) 
(54) 
(55) 
(56) 



p{vi, V2)pix\vi, V2)piu)p{xi\u)p{yi\u, vi, yi)p{yi, 2/2^, xi) (57) 
subject to the following constraint 

I{Y,; FilXi, V^, U) < /(Fi, U; ¥2) (58) 
The proof of this theorem is given in Appendix [Dl 

Remark 11 In Theorem HI U denotes the actual help signal, while the channel input Xi, 
which is correlated with U, may include an additional jamming attack. The intuition behind 
this achievable scheme is that, although user 2 should be able to decode U, it cannot decode 
the entire Xi. Therefore, since user 2 cannot decode and eliminate Xi from Y2, its channel 
becomes an attacked one, where decoding Vi may be impossible. Therefore, in this scheme, 
user 1 first attacks user 2 to make its channel worse by associating U with many Xis (hence, 
it confuses user 2), and then helps it to improve its secrecy rate. 

Remark 12 We note that this achievable scheme is reminiscent of "cooperative jamming" 
[30]. In [30], the focus is on a two user MAC with an external eavesdropper, where one of the 
users attacks both the legitimate receiver and the eavesdropper, with the hope that it hurts 
the eavesdropper more than it hurts the legitimate receiver, and improves the secrecy of the 
legitimate receiver. In contrast, in our work, the relay (user 1) attacks user 2 to improve its 
own secrecy. 

7 Gaussian Example Revisited 

Consider again the Gaussian CRBC, now with Ni > N2. The scheme proposed in Theorem H] 
works as follows: user 1 divides Xi into two parts. The first part carries the noise and the 
second part carries the bin index of Yi. Although TheoremlHis valid for all cases, assume here 
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that user 1 has large enough power. Then, the first part makes user 2's channel noisier than 
user I's channel. This brings the situation to the case studied in Section [51 Consequently, 
we can now have a positive secrecy rate for user 1, and also provide a positive secrecy rate 
to user 2, by sending a compressed version of Yi to it, as in Section [5l 

Proposition 3 The following equivocation rates are achievable for all {a, P) G [0, 1] x [0, 1] 

s I + i7?f]vr) -'M'^ '^^) 

where a=l — a,/3 = l — /3, and Nc is subject to 

^aP{aP + N2 + a^P) + N,{P + N2 + aPP) 

Nc > ^ 61 

apP 

Proof: This achievable region is obtained by selecting the random variables in Theorem [Has 
X = 1/1 + 1/2 where Vi ~ ^^{0, aP), 14 ~ ^^{0, aP), Xi = U + Zj where U ~ 7V(0, a(5P),Zj ~ 
7V(0, a/3P), Yi = Yi-Vi + Z^ = l^ + Zi + Z^ where ~ 7V(0, N^). Moreover, Vi, 1^, U, Zj, Z^ 
are all independent. Here, Zj serves as the jamming signal, and U serves as the helper signal. 
User 1 first jams user 2 and makes its channel noisier than its own by using Zj and then helps 
user 2 through sending a compressed version of its observation by using U . The rates are 
then found by direct calculation of the expressions in Theorem H] using the above selection 
of random variables. ■ 

Moreover, as in Section we can use DPC based schemes in this case also. The following 
proposition characterizes the DPC scheme for Theorem HI 

Proposition 4 The following equivocation rates are achievable for any 7 and for all (a, j3) G 

[0, 1] X [0, 1] 

„ ^ 1 , A {a-i + afP \ 1 , A aP 

Re,i < ;.log 1 + , , - o log 1 + 



2 ^ V (a + 7^a) A^i + (7 - l)'^aaP J 2 ^\ {apP + N2) , 

log (1 + 7'^) (62) 
1 , / aP{Ni + N,) + a{l - ^fP{aP + apP + N2) 



Re,2 < - log ( 1 + 



2 "V {aP + a(3P + N2){N^ + N,) 

where a = 1 — a,j3 = 1 — [3 and N^. is subject to 



iiogfi + °^'7-£n 4i°g(i + r-) (63) 



> -"^^^^ (64) 
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where 



9 = ap{a + a-f^)P (65) 

r]= {a + 7^a) P [aPNi + (1 - jfaP{ap + a)] 

- (P + a(3P + N2) [Ni{a + T^a) + aa(7 - 1)^^] (66) 

u=[{P + a^ + N2) [(1 - jfaP + A^i] - (1 - 7)'a'P'] [A^i (a + 72a) + Paa(7 - 1)^] 

(67) 

Proof: All random variable selections are the same as in Proposition [2] except for Xi , U. 
Here, we choose Xi = Zj + U and U ~ A/'(0, a(3P), Zj ~ A/'(0, aJiP). U, Zj are independent. 
■ 

We first note that Propositions [3l H] reduce to Propositions [H [2], respectively, by simply 
selecting P = 0, i.e., no jamming. We provide a numerical example in Figures [5l [6] for 
P = 8,A^i = 2,A^2 = 1- Since A?"! > A^2, a positive secrecy rate for user 1 would not be 
possible if the cooperative link did not exist. However, if user 1 has enough power to make 
user 2's channel noisier by injecting Gaussian noise to it, user 1 can provide secrecy for itself. 
For user 1 to have positive secrecy, we need 

Ni- N2 

a > ' p (68) 

Otherwise, user 1 cannot have positive secrecy by using strategies employed in Propositions [31 
HI In addition, contrary to Section O we observe from Figures |5] and [6] that here DPC 
based schemes do not provide any gain with respect to the independent selection of Vi, V2. 
Furthermore, we also apply Propositions[3]and|l]to the case where user 1 is stronger than user 
2 by selecting the noise variances as A^i = 1, A^2 = 2 as in Section [5] to show that propositions 
presented in this section cover the ones in Section O We provide the corresponding graphs 
in Figures [7] and [HI Comparing Figures [3] (resp. [1]) and [7] (resp. [8]), we observe that even 
though the maximum secrecy rate of user 2 remains the same, the maximum secrecy rate of 
user 1 is improved significantly. This improvement comes, because through Propositions [3] 
and[ll, user 1 jams the receiver of user 2. 

Next, we examine Figures [3] and [7| in more detail. In Figure[3l for instance when a = 100, 
the largest Pe,2; which is about 0.25 bits/channel use, is obtained when Pe,i = 0. This 
corresponds to the case where user I's rate and secrecy rate are set to zero. In this case, user 
1 serves as a pure relay for user 2. The secrecy rate we obtain at this extreme is the same 
as [11,13]. At the other extreme, the largest Re,i, which is about 0.42 bits/channel use, is 
obtained when Pg 2 = 0. In this case, user 2 is just an eavesdropper in a single- user channel 
from the transmitter to user 1. The secrecy rate we obtain at this extreme is the same 
as [2,3,31]. Moreover, as we see from Figure [3], whenever user 1 helps user 2 to have positive 
secrecy, it needs to deviate from this extreme point. Thus, user 2's positive secrecy rates 
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Figure 5: Achievable equivocation rate region using Proposition [3] where user 1 jams and 
relays, and Vi,V2 are independent. P = 8, A^i = 2, A^2 = 1, i-e., user 1 cannot have any 
positive secrecy in the underlying BC. 




Figure 6: Achievable equivocation rate region using Proposition H] where user 1 jams and 
relays, and Vi,V2 are correlated, admitting a DPC interpretation. P = 8, A^i = 2, A^2 = 1, 
i.e., user 1 cannot have any positive secrecy in the underlying BC. 
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Figure 7: Achievable equivocation rate region using Proposition [3] where user 1 jams and 
relays, and Vi,V2 are independent. P = 8, Ni = 1, N2 = 2, i.e., user I's channel is stronger 
than user 2. 
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Figure 8: Achievable equivocation rate region using Proposition H] where user 1 jams and 
relays, and Vi,V2 are correlated, admitting a DPC interpretation. P = 8, A^i = 1, A^2 = 2, 
i.e., user I's channel is stronger than user 2. 
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come at the expense of a decrease in user I's secrecy rate. If we consider Figure [TJ the largest 
i?e,2 is the same as that in Figure [3l which is again achieved when R^ i = 0, i.e., when user 1 
acts as a pure relay for user 2. However, in Figure [71 user I's maximum secrecy rate increases 
dramatically due to its jamming capabilities in Proposition [3l In Figure [3, user 1 achieves its 
maximum secrecy rate, which is about 1.58 bits/channel use, when it uses all of its power for 
jamming user 2's receiver and when the rate of user 2 is set to zero. We note that this rate 
is larger than that is achievable in the corresponding single-user eavesdropper channel from 
the transmitter to user 1, while user 2 is an eavesdropper. We observe from Figure [7] that 
when user 1 is able to jam and relay jointly, it can provide secrecy for user 2 while its own 
secrecy rate is still larger than that of the corresponding single-user eavesdropper channel. 
Thus, as opposed to the case where it can only relay, i.e.. Proposition [H both users enjoy 
secrecy in Proposition [3], while user 1 does not have to compromise from its own secrecy rate 
that is achievable in the underlying eavesdropper channel. 

Remark 13 We are now ready to discuss why we could not find an outer bound for the 
equivocation rate of user 1 that relies only on the channel inputs and outputs. To understand 
this, we first examine the outer bound we found on the equivocation rate of user 2 in 
Theorem [3l This outer bound is obtained by giving the entire observation of user 1 to user 
2 (i.e., Nc = 0). Hence, this is the best possible scenario as far as the channel of user 2 is 
concerned, and thus, it yields an outer bound. However, a similar approach cannot work 
for user 1, because although user 1 can have access to the observation of user 2, user 1 
still has additional freedom (and opportunities) to increase its own secrecy rate by sending 
jamming signals over the cooperative link, as shown in this section. This is the main reason 
why we could not find a simple outer bound for user I's secrecy rate using only the channel 
inputs/outputs. 

8 Two-sided Cooperation 

In this section, we provide an achievable scheme for CRBC with two-sided cooperation. In 
this case, each user can act as a relay for the other one; see Figure [21 The corresponding 
channel consists of two message sets wi G Wi,W2 G W2, three input alphabets, one at the 
transmitter x G A", one at user 1 Xi G and one at user 2 X2 G X2. The channel consists of 
two output alphabets denoted by 2/1 G 3^i,?/2 ^ 3^2 at the two users. The channel is assumed 
to be memoryless and its transition probability distribution is p{yi, y2\x, xi, X2). 

A (2"'^^, 2"^^, nj code for this channel consists of two message set as Wi = {l, . . . , 2"^^} 
and VV2 = {1, • • • ,2"^^}, an encoder at the transmitter which maps each pair {wi,W2) G 
(Wi X W2) to a codeword x" G X"', a set of relay functions at user 1, xi^i = /i,i(?/i,i, . . . , 
1 < i < n, and a set of relay functions at user 2, X2,i = /2,j(?/2,i, • • • , ?/2,i-i), 1 < * < two 
decoders, one at user 1 and one at user 2 with the mappings (71 : 3^" — > Wi, g2 '■ 3^2 
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Definitions for the error probability for this two-sided case are the same as in the single- 
sided case. The secrecy of the users is again measured by the equivocation rates which are 
^H(Wi\Y2 , X2) and j^H(W2\Y{^ , X^). In this case, since user 2 has a channel input also, we 
condition the entropy rate of user I's messages on this channel input. 

A rate tuple {Ri, R2, Re,i, Re,2) is said to be achievable if there exists a (2^^^ , 2"-^^ , nj 
code with lim^^oo -Pg" = 0, and 

lim -H{Wi\Y2^,X^) > R,^i, lim - H {W2\Y^" , X^) > R,^2 (69) 

n— >oo fl ' n— >oo 77, ' 

The following theorem characterizes an achievable region for this channel model. 
Theorem 5 The rate tuples {Ri, R2, Re,i, Re,2) satisfying 

Ri < I{V,;Y^,Y2\X,,U2) (70) 

R2 < I{V2■,Y2,Y^\X2,U^) (71) 

R1 + R2 < I{Vi;YuY2\XuU2)+I{V2;Y2,Yi\X2,Ui)-I{VuV2) (72) 

Re,l < Ri (73) 

Re,i < [l{V,-Y,,Y2\X,,U2)-I{V,-Y2,Y,\V2,X2,U,)-IiV,-V2)Y (74) 

Re,2 < R2 (75) 

Re,2 < [l{V2;Y2,Yi\X2,Ui)-I{V2;Yi,Y2\Vi,Xi,U2)-I{Vi;V2)Y (76) 
are achievable for any distribution of the form 

p{Vi,V2)pix\Vi, V2)p{Ui, Xi)p{yi\Ui, yi)p{u2, X2)p{y2\u2, y2)piyi,y2\x, Xi,X2) (77) 

subject to the following constraints 

I{Yi;Yi\Ui,Xi,U2) < I{Yi,Ui;Y2\X2) (78) 
IiY2■,Y2\U2,X2,U^) < I{Y2,U2■,Y^\X,) (79) 

The proof of this theorem is given in Appendix [El 

Contrary to the previous achievable schemes given in Theorem [T] and HI here users do not 
compress their observations after erasing their codewords from the observations; this is why 
we did not condition Yi (resp. Y2) on Vi (resp. V2) in (1771) . In fact, they cannot remove their 
own codewords from their observations because each user employs a sliding-window type 
decoding scheme, i.e., they should wait until the next block to decode their own codewords, 
whereas compression should be performed right after the reception of the previous block, 
at which time they have not yet decoded their own messages. However, we note that this 
achievable scheme also provides opportunities for jamming as did the achievable scheme 
provided in Section [61 
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9 Gaussian Example for Two-sided Cooperation 

The channel outputs of a Gaussian CRBC with two-sided cooperation are 



Fi = X + ^2 + (80) 
Y^^ X + X^ + Z2 (81) 

where ~ A^(0, TVi), Z2 ~ A^(0, A^a) and are independent, E[X'^] < P, E[Xf] < a^P, 
E [Xl\ < a2P. 

We present the following proposition which characterizes an achievable equivocation re- 
gion. 

Proposition 5 The following equivocation rates are achievable for all (q:,/3i,/32) G [0, 1]^ 

ReA < - log 1 + 



2 ° V aP{N^ + 02/^2^ + A^2 + iVc,2) + {Ni + 02/32^') ( ^^2 + ^,2) 
--log(l + aP(^ + \, 11 (82) 

P .1, A. ^ aP(7V2 + aiA^ + A^2 + A^c,i) 

^e,2 < - log I 1 + 



2 °V Q;P(iV2 + ai/3iP + 7Vi + 7V,,i) + (7V2 + ai/3iP)(iVi + 7V,,i) 

--logfl + apf— ^ + (83) 

where a — 1 — a,Pi — 1 — I3i,j32 = 1 — I32i and A^c.i. ^c.2 are subject to 

AT,, > -^n + V6fi + 4anCn ^g^^ 
2aii 

^ -^22 + V&i2+4a22C22 .g.v 

^^'^ 2^2 ^ ^ 

and 

an = ai/3iP (86) 

6n = P(P + ai/3i(P + ATi)) - (p + AT^ + a2^2P){P + A^2 + ai^SiP) (87) 

cn = (P + TVi + a2;52P) (PA^i + (P + A^i)(A^2 + ai;3iP)) (88) 

022 = a2[32P (89) 

622 = P(P + 02/^2 (P + A^2)) - (P + ATi + a2^2P){P + N2 + aiPiP) (90) 

C22 = (P + A^2 + aipiP) {PN2 + (P + iV2)(iVi + a2^2P)) (91) 

Proof: This achievable region is obtained by selecting X = Vi + V2 where Vi ~ A/'(0, aP), 
V2 ~ A/'(0, aP) and are independent, = Ui+Zi where Ui ~ A''(0, ai/3iP), Z^ ~ A/'(0, ai/3iP), 
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Figure 9: Achievable equivocation rate region using Proposition [5] where each user can jointly 
jam and relay. P = 8, iVi = 1, A''2 = 2, i.e., user 2 cannot have any positive secrecy in the 
underlying BC. 

i = 1,2 and independent, and Yi = Yi + Z^^i where Z^^i ~ Af{0, Nc^i),i = 1,2 and are 
independent of all other random variables. Direct calculation of rates in Theorem [5] with 
these random variable selections yields the achievable region. ■ 

A numerical example is given in Figure[9]for the case P = 8, A'^i = 1, A''2 = 2. Comparing 
Figure [9] with Figures [7] and [HI we observe that user 2's secrecy rate improves significantly 
because now user 2 can jam user 1 to improve its own secrecy rate. We also observe that user 
I's secrecy rate improves as well, compared to Section [71 The increase in user I's secrecy in 
this two-sided case is due to the fact that user 2 now acts as a relay for user 1. However, 
when user 1 jams user 2 using all of its power, it limits the help that comes from user 2, 
hence Theorem [5] provides only a modest secrecy rate increase for user 1 on top of what 
Theorem [H already provides. 

10 Conclusions 

In this paper, we investigated the effects of cooperation on secrecy. We showed that user 
cooperation can increase secrecy, i.e., even an untrusted party can help. An important point 
to observe though is that whether cooperation can improve secrecy or not depends on the 
cooperation method employed. For instance, even though a decode-and-forward (DAF) based 
cooperation scheme can increase the rate, it cannot improve secrecy, because in this case the 
cooperating party, which is also the eavesdropper, needs to decode the message it forwards. 
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However, in CAF, we do not require the cooperating party to decode the message. In fact, in 
CAF, the cooperating party helps increase the rate of the main transmitter to levels which 
it itself cannot decode, hence improving the secrecy of the main transmitter-receiver pair 
against itself. 



Appendices 



A Proof of Theorem [2 



Here we prove the outer bound on the capacity-equivocation region of the CRBC given in 
Theorem [2] which closely follows the converse given in [3] and the outer bound in [10]. First, 
define the following random variables 

U^ = Yr'Y^^r (92) 
^1,^ = WiU, (93) 

V2,^ = W2U, (94) 

which satisfy the following Markov chain 

{V^„ ^ {X„ Xi„ Yi,) ^ Y,,i (95) 

but do not satisfy the following one 

^ {V,„ ^ (X„ X,,) ^ (Fi,, (96) 

because of the encoding function employed at user 1 which can generate correlation between 
Yi^i and (Yii^i, ^2"i+i) through Xi^i+i that cannot be resolved by conditioning on (Xj, Xi^i). 
For a similar discussion, the reader can refer to [19]. 
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We start with the achievable rate of user 1. 



nRi = H{Wi) = I{Wi;Y{') + H{Wi\Y];') (97) 

< I{Wi;Y,^)+en (98) 

n 

= 5^/(M^i;ri,|yri) + e„ (99) 



i=l 

n 



= Y,H{W,\Yl-^)-H{W,\Yl-\Y,,) + e^ (100) 

i=l 

n 

= Y,H{W^\Yl-\X^^i)-H{W^\Yl-\Y,^^ + en (101) 

i=l 

n 

< Y,H{W^\Yl-\X,^i)-H{W^\Yl-\Y,,,X^.^ + en (102) 



n 



= Y,I{Wi-Y,,\Yr\X,,) + en (103) 

i=l 
n 

< 5^i7(yi,|Xi,)-//(ri,|y/-\Xi„w^i) + e„ (io4) 

i=l 
n 

< HiY^AX^,i) - H{Yi,,\YI-\ Wi, F^,+i) + e„ (105) 

i=l 

n 

= Y,^(^h^■,YlAXl,^) + en (106) 



i=l 



where ( !98|) is due to Fano's lemma, (llOip follows from the Markov chain Wi Yl~ — > Xi^j, 
(11021) . fll04p and (11051) are due to the fact that conditioning cannot increase entropy, and 
(11061) follows from the definition of Vi^j in (!93l) . Similarly, for the achievable rate of user 2, 
we have 

nR2 < /(W^2;>T) + e„ (107) 

n 

= 5^/(iy2;1^2.|Krm) + en (108) 

i=l 
n 

= 5^//(F2.|l?.+i)-i/(1^2.|lXm,W^2) + en (109) 

1=1 

n 

< Y,HiY2,)-H{Y,,\Y,^^^^„W,,YI-') + en (110) 

i=l 
n 

< 5^/(K2,;y2,) + e„ (111) 



i=l 



where (11071) is due to Fano's lemma, (1 11 01) is due to the fact that conditioning cannot increase 
entropy, and (111 II) follows from the definition of ¥2^1 given in 

24 



We now derive the outer bounds on the equivocation rates. We start with user 1. 

= H{W^\Y^) = H{W^)-I{Wv,Y:^) (112) 
= I{WuY^)-I{Wi-Y^) + H{Wi\Y^) (113) 
< I{Wv,Yl') - I{Wv,Y^) + en (114) 

n 

= Y.I{W,-Y,,\Yl-^)-I{W,-Y^^Y:^^,^,) + t^ (115) 

i=l 
n 

i=l 

+I{Yl-^-Y^,,\Y^^^,,W,) + en (116) 
where (11141) is due to Fano's lemma. Using [3] 

n n 

Y.^{yw:yiAyi-\w,) = j]/(yr^r2,|y^,^.„M^i) (n?) 

i=l i=l 

in (I116p . we obtain 

n 

nRe,i < 5^/(I^i,F^,+i;yM|l^'-i)-/(W^i,l^'-^r2,|^^m) + en (118) 
1=1 

n 

= J2 A^i; yiAyr\ y^) + ny^-, yi^yr') - nwi, ^2,1^^,+,, , y^') 

i=l 

-/(yr^F2.|l^^.+i) + e„ (119) 

Now, using [3] 

n n 

j2ny2,+i;yiAyr') = j^w-^r^.iy^.+j (120) 

i=l i=l 

in f lligp . we obtain 

n 

nRe,i < J]/(W^i;yi,|Fr\y^,+i)-/(l^i;y2,|l?.+i,l^r') + en (121) 

i=l 
n 

= ^/(m;l"M|t/.)- W;>^2,«|^7,) + e„ (122) 

i=l 

n 

= J2l{W,,U,;Y,,\U,)-I{WuUf,Y2,m + (^n (123) 

i=l 
n 

= J2i{v,x,yiM)-HVix,y2M) + ^n (124) 

i=l 

where f ll22p and (11241) follow from the definitions of Ui and Vi^i given in (l92l) and ( 193|) . 
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respectively. Similarly, we can use the preceding technique for user 2's equivocation rate as 
well after noting that 

nRe,2 < H{W2\Y^,X'l)<H{W2\Y^) (125) 

which leads to 

n 

nRe,2 < 5^/(l^2,«;1^2,«|f/^)-/(^2,.;ll,^|f/^)+e. (126) 
1=1 

The other bounds on the equivocation rates can be derived as follows. 

ni?,,i = H{W,\Y^") < H{W^, W2\Y^) (127) 

= H{Wi\W2.Y^) + H{W2\Y^) (128) 

<H{W^\W2,Y^) + en (129) 

= I{Wr- Y^\W2) - I{Wv, Y^\W2) + H{Wr\W2, Y^) + e„ (130) 

< I{Wi- Y^\W2) - I{Wi- Y^\W2) + (131) 

n 

= m,- ^1,11^2, 1^'-') - Y2AW2, K,%i) + e; (132) 

i=l 

n 

i=l 

n 

= J2 HWu Y,,\W2, Yr\ l?.+i) - I{W,; Y2,\W2, ^1'') + 4 (134) 

i=l 

n 

= Y,,\W2, Ui) - I{Wi; Y2AW2, U,) + e'^ (135) 

i=l 
n 

= Y HWi, Ui- Y^,\W2, U,) - I{Wi, U- Y2AW2, Ui) + e'^ (136) 

2=1 

n 

= Y HViX, Y1AV2,) - liVrx, Y2AV2,^ + e'^ (137) 



i=l 



where (11291) and (I13ip are due to Fano's lemma, and (11331) and (I134p are due to the following 
identities [3] 

n n 

Y YiAW,, W2. Yr') = Y A^"^ W2, y^,+i) (138) 

i=l i=l 

n n 

YKy2,+i:yiAW2.Yi-') = 5^/(yr^F2.iw^2,>Xm) (139) 

i=l i=l 

respectively. Finally, (11351) and (11371) follow from the definitions of Ui,Vi^i and V2,i given 
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in (192|) . (p3|) and (jH]), respectively. Similarly, we can use this technique to bound user 2's 
equivocation rate after noting that H (W2\Y{^ , X^) < H(W2\Y^), which leads to 

n 

nRe,2 < H{W2\Y,^,X'^) < H{W2\Yn < J] /(V^2,^; >2,^|^i,) - /Ct^2,^; 1^2,.|^i,) + (140) 

i=l 

To express the outer bounds obtained above in a single-letter form, we define U = 
JUj,Vi = Vij,V2 = V2,j,X = Xj,Xi = Xi^j,Yi = Yij,Y2 = Y2,j where J is a random 
variable which is uniformly distributed over {1, . . . ,n}. Using these new definitions, we can 
reach the single-letter expressions given in Theorem [21 hence completing the proof. 



B Proof of Theorem S 

The proof is as follows. 

Re,2 < H{W2\Y^, ) < I{W2; ITI^r) - I{W2\ nl^r) + H{W2\Y^, ) (141) 

< I{W2. Y^\X^) - I{W2; Y^m + e„ (142) 
<IiW2;Y^'\Xl\Yn + en (143) 

< /(X", W2; Y^\X'^, y^") + en (144) 
= /(X";F2l^r,n") + en (145) 

n 

= J2 A^"; y2AXl n", Yf) + e„ (146) 

i=l 
n 

< J2 H{Y2,\X,„ Y,,) - H{Y2,\Xl F,", Y^-\ X") + e„ (147) 

i=l 

n 

= Y,HiY2,\X,„Y,,) - //(F2,i|Xi„ri„X,) + e„ (148) 



i=\ 



= ^/(X,;r2,|^i„^i,) + en (149) 



where (11421) is due to Fano's lemma, fll45p follows from the fact that given X"', VF2 is 
independent of all other random variables, (11471) is due to the fact that conditioning cannot 
increase entropy, and fll48p follows from the Markov chains 

{Yx,.Y2,^ ^ (X„Xi,) ^ {Yl\Yir\X^-\X\-') (150) 
Y2,i (Xj, Xi_i, yi_i) ("5^1"+!, -^^j^i, -^M+i) (151) 

Thus, after defining an independent random variable J, that is uniformly distributed over 
{l,...,n}, and X = Xj,Xi = Xij,Yi = Yi^j,Y2 = 1^2, j, we can obtain the single-letter 
expression in Theorem [3l completing the proof. 
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C Proof of Corollary [T] 



In Propositions [T] and [21 if we take a — > oo, then the secrecy rate in ( 149|) can be shown to 
be achievable. As a notational remark, H{-) denotes the differential entropy in this section. 



We now compute an outer bound for i?e,2 using Theorem [3l 

Re,2<I{X;Y2\X^,Y{) (152) 

= H{Y2\Xi,Yi)-H{Z2\Zi) (153) 

<H{X + Z2\Yi)-H{Z2) (154) 

< H{X + Z2- aYi) - ^ log(2^eiV2) (155) 

< ^ log(27re)^ [{X + Z2 - aY{)^] - ^ log(27reiV2) (156) 

< ^ log ((1 - afP + a'N^ + N2)-\ logiN^) (157) 



where in ( 11541) . we used the fact that conditioning cannot increase entropy and that H{Z2\Zi) 
= H{Z2) due to the independence of Zi and Z2. Equation fll55p is again due to the fact that 
conditioning cannot increase entropy, fll56p comes from the fact that Gaussian distribution 
maximizes entropy subject to a power constraint, and fll57p is obtained by using the power 
constraint on X. Finally, we note that f ll57p is a valid outer bound for every a and if we 
select a as 



we get dinD, completing the proof. 



D Proof of Theorem 4 



The transmitter uses the joint encoding scheme of Marton [22] and user 1 uses a CAF 
scheme [17]. User 2 employs list decoding to find which Yi is sent. Let A^iVi) and A^{y2) 
denote the sets of strongly typical i.i.d. length-n sequences of vi and V2, respectively. Let 
A" (yi|v2) (resp. A" (V2IV1)) denote the set of length-n sequences Vi (resp. V2) that are 
jointly typical with V2 (resp. vi). Furthermore, let *S'"(vi) (resp. S'"(v2)) denote the set 
of Vi (resp. V2) sequences for which (V2IV1) (resp. 74"(yi|v2)) are non-empty. Fix the 
probability distribution as 

p{vi,V2)p{x\vi,V2)p{u, xi)p{yi\u, vi, yi) (159) 

Codebook structure: 
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1. Select 2"-^'^^') Vj sequences through 



if v. G 5"(v, 



p{^^) = { (160) 
0, otherwise 



in an i.i.d. manner and index them as Yi{wi,Wi,li) where Wi G |l, . . . , 2"^*}, Wi G 
{1,...,2"^'} and h G {l,...,2"^'} for i = 1,2. Ri,Ri,Li and are related 

through 

= + Ri + Li, z = l,2 (161) 

Furthermore, we set 

Li + L2 = I{Vi; V2) + e (162) 

to ensure that for given pairs {wi, wi) and {w2, W2), we can find a jointly typical pair 
(vi(m;i,«;i,/i),V2 (102,^2, ^2)) for some /i,/2- 

2. For each (^1,^2), the transmitter randomly picks {wi, W2) and finds a pair (vi(wi, lOi, /i) 
V2(w2, '^'2, ^2)) that is jointly typical. Such a pair exists with high probability due to 
(11621) . Then, given this pair of (vi,V2), the transmitter generates its channel inputs 
through nr=i^'(^il^i,i'^2,i)- 

3. User 1 generates 2"^° length-n sequences u through p(u) = nr=iP('^i) ^^"^ labels them 
as u(sj) where Sj G {1, . . . , 2""^''}. 

4. For each u(sj), user 1 generates 2"^ length-n sequences yi through p(yi|u) = HiLi 
p{jji^i\ui) and indexes them as yii^Zilsi) where G {1, . . . , 2"^}. 

5. For each u(si), user 1 generates 2"-^o length-n sequences xi through p(xi|u) = Y\a=i 
p{xi^i\ui) and indexes them as xi {U\si) where U e {1, . . . , 2"^o}. 

Partitioning: 

• Partition 2"-^ into cells 5'^^ where Si G {1, . . . , 2"^o}. 
Encoding: 

The transmitter sends x corresponding to the pair {wi,W2)- User 1 (relay) sends Xi(tj|sj) 
if the estimate of yi(2— 1), i.e., falls into 5'^^ and ti is chosen randomly from {1, . . . , 2"-^o}. 
The use of many xi(tj|sj) for actual help signal u(sj) aims to confuse user 2 and to decrease 
its decoding capability. 

Decoding: 
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a. Decoding at user 1: 

1. User 1 seeks a unique typical pair of (yi(z), Vi(iyi j, toi^j, /j), xi(tj|sj)) which can be 
achieved with vanishingly small error probability if 

R{V,)<IiV,;Y,\X,) (163) 

2. User 1 decides that Zi is received if there exists a jointly typical pair {yi{zi\si),'yi{i), 
vi(tyi^j, t^i^j, Zj), xi(tj|sj)) which can be guaranteed to occur if 

R>I{Yi;Yi\U,X,,V,) (164) 

b. Decoding at user 2: 

1. User 2 seeks a unique jointly typical pair of (y2(i), u(sj)) which can be found with 
vanishingly small error probability if 

Ro<HU;Y2) (165) 

2. User 2 employs list decoding to decode yi(2i-i|sj_i). It first calculates its ambiguity 
set as 

C{yi{zi-i\si^i)) = {yi(zi_i|si_i) : (yi(2;i_i|si_i), y2(i - 1)) is jointly typical} (166) 

and takes its intersection with Sg^ which results in a unique and correct intersection 
point if 

R < I{Yi; Y2\U) + Ro< I{Y,, U; Y2) (167) 
Equations (11641) and (11671) lead to the compression constraint in (!58l) . 

3. User 2 decides that V2{w2,i~i,W2A-i,l2,i~i) is received if there exists a unique jointly 
typical pair {-V2{w2,i-i,W2,i-i,h,i^i),y2{i - 1), yi(-2i-i|-Si-i)), which can be found with 
vanishingly small error probability if 

R{V2)<I{V2;Y2,Yi\U) (168) 

Equivocation computation: 

We now show that i?e,i and -Re,2 satisfying ( |53l) - (!54l) and (!55l) -( l56l) are achievable with 
the coding scheme presented. To this end, we treat several possible cases separately. First, 
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assume that 



R, > I{Vr, FilXi) - IiV^■, Y,, Y^\V2, U) - I{V^- V^) (169) 
R2 > I{V2;Y2,Yi\U) - I{V2;Yi\Vi,Xi)-I{Vi;V2) (170) 

For this case, we select the total number of codewords, i.e., RiVi), z = 1, 2, as 

R{V,) = I{Vi;Yi\Xi) (171) 
R{V2) = I{V2;Y2,Yi\U) (172) 

With this selection, we have 

Ri + L,< I{Vi- F2, Yi\V2, U) + /(Fi; V2) (173) 
R2 + L2< I{V2; Fil^i, Xi) + I{V,- V2) (174) 

We start with user I's equivocation rate, 

H{Wi\Y^) > H{Wi\Y^, V^, f/", y^") (175) 
= H{Wi, ^2", >^r|f/") - ^(^2", KlU""') (176) 

= //(v;", w^i, F2", vg^, ^;"|f/") - H{v^^\Wi, yi\ v^, y^, f/") 

- H{Y^,V:^,Y^\U'') (177) 

= //(v;"|t/") + H{Wi, ^2", v;") - //(\/i"|m, IT, ^2", ^^r, u"") 

- H{Y^,V;\Yl'\U'') (178) 

> ff(yi"it/") - /(Vi"; F2", ^;"|f/") - H{y^\Wi, Y^, v^, i;", f/") (179) 

where each term will be treated separately. First term is 

H{V^\U'') = Hiyi") = nR{Vi) = nI{Vi;Yi\Xi) (180) 

where the first equality is due to the independence of [/" and V^". The second equahty 
follows from the fact that can take 2"^^'^'^'' values with equal probability. The third 
equality comes from our selection in fll7ip . The second term of fll79p can be bounded as 

I{V,^-Y^^,V2'',Yr\Un <nI{Vv,Y2,V2,Yi\U) +nen (181) 

using the approach devised in Lemma 3 of [10]. To bound the last term in f ll79p . we assume 
that user 2 is trying to decode given the side information Wi = Wi. Since can take 
less than 2-(^(^i'^^'^il^'^2)+^(^i'^2)) values (see (11731) ) given Wi = Wi, user 2 can decode V^" 
with vanishingly small error probability as long as Wi = Wi is given. Consequently, the use 
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of Fano's lemma yields 

H{V,^\W,,Y,^,V2^,Y{^,U^) < en (182) 
Plugging (fTSOD . (fTSTD and (fT82D into (fT79|) . we get 

i^(H^i|l"2") > ^^(V^i; ^il^i) - nI{V^; ^2, ^1, V2\U) - ne„ (183) 
= nJ(\/i; FilXi) - n/(yi; ^2, ^1^2, t/) - nJ(\/i; V^2) - ne„ (184) 

where (11841) follows from the independence of (Vi,V2) and U, i.e., /(Vi; V2|^7) = /(Vi; V2). 
Similarly, we can bound equivocation of user 2 as follows, 

H{W2\Y^, > H{W2\Y{', Xi", T/i'^) (185) 
= H{W2, Yl\ V^i^lXf ) - iy(y/', V^"|Xf ) (186) 

= //(W2, "v^, Y^, v^\x'i) - H{y:^\W2, Y^, V7, xf ) - //(y^", v^^ixf ) (i87) 
= H{y^\x'^) + //(iy2, >?, T/i^lXi", - ^(V'2iw^2, Yi\ v^, x'^) 
- i/(ri",yi"|xf) (188) 

> //(V7|Xf ) - 7(^2"; V^\X'l) - H{y^\W2, y", y", Xf ) (189) 

where the first term is 

H{V^\X'l) = H{V^) = nR{V2) = nI{V2;Y2,Yi\U) (190) 

where the first equality is due to the independence of V2 and X", the second equality comes 
from the fact that V2 can take 2'^^^'^'^'> values with equal probability and the last equality is 
a consequence of our choice in (11721) . The second term of fll89p can be bounded as 

1(^2"; Fi", T/i"|Xn < n/(y2; Fi, FilXi) + nen (191) 

following the approach of Lemma 3 of [10]. To bound the last term of fll89p . we assume that 
user 1 is trying to decode V^" given the side information W2 = W2- Since V.^ can take at 
most 2"(^(^2;n|Vi,Xi)+/(y2;Vi)) values (see i^7^) given W2 = W2, user 1 can decode with 
vanishingly small error probability as long as this side information is available. Consequently, 
the use of Fano's lemma yields 

H{V^'\W2,Y(',V,^,Xl') < e„ (192) 
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Plugging ffTQOD . (fmil and (fT92ll into (fT89|) . we get 



i:f(W^2|n",^r) > nI{V2;Y2,Y^\U)-nI{V2;Y,,Vr\X^)-nen (193) 
= 71/(^2; Y2, Y^\U)- nI{V2; Yi\VuX,) - nI{Vi; V2) - ne„ (194) 

where (11941) follows from the independence of (Vi, V2) and Xi, i.e., I{Vi; V2IX1) = /(Vi; V2). 

We have completed the equivocation calculation for the case described by (I169l) - (ll70p . 
The proofs of other cases involve no different arguments besides decreasing the total number 
codewords in ( 117ip -( fT72l) . For example, if 

Ri < I{Vi; FilXi) - I{Vi; Y2, Yi\V2, U) - I{Vi; V2) (195) 

then we select the total number of codewords for user 1 as 

R{V,) = R, + I{Vi- Y2, Yi\V2, U) + /(Fi; V2) (196) 

which is equivalent to saying that 

/?i + Li = /(Fi; F2, Y^\V2, U) + /(Vi; V2) (197) 

In this case, following the steps from ( 1175P to ( 1179p . we can bound the equivocation of user 
1 as follows, 

h{Wi\y;') > H{yi'\u''') - i{v;'; K,", v;\ Yi'p'') - H{yi'\Wu y;\ v^, y^, f/") (i98) 

where the first term is now 

H{Vl'\U'') = H{Vl') = nR{V^) = n{Ri + /(Vi; Y2, ^1^2, U) + /(Fi; 1^2)) (199) 

where the first equality is due to the independence of and f/", the second equality is 
due to the fact that Vj" can take at most 2"-^*^^i^ values with equal probability and the last 
equality is a consequence of our choice in (11961) . An upper bound on the second term was 
already obtained in fllSip . The third term can also be shown to decay to zero as n goes to 
infinity considering the case that user 2 is decoding Vi using side information Wi = wi. 
Since V^" can take 2'^(^(^i''*^2,yi|y2,c/)+/(yi;y2)) values given Wi = wi, user 2 can decode with 
vanishingly small error probability as long as this side information is available. Therefore, 
the use of Fano's lemma implies 

H{V('\Wi,Y^,V,^,Yr,Un < e„ (200) 
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Plugging ffT8TD. ffT99|l . (1200|1 into (fTOHD . we get 

^^(^^11^-2") > + KVu >^2, n|V^2, t/) + ^2)) - /(V^i; K,, V^2, ^l|f/) - rie„ (201) 
= nRi - nen (202) 

where we used the fact that U and (Vi, V2) are independent, i.e., /(Vi; V2\U) = /(Vi; ^2)- The 
other cases leading to different equivocation rates can be proved similarly, hence omitted. 



E Proof of Theorem [5 

Fix the probability distribution as 

p{vi,V2)pix\vi,V2)p{ui,Xi)p{yi\ui, yi)piu2, 0:2)^(^21^2, 2/2) (203) 

Codebook structure: 

1. Select 2"'^^^^^ Vj sequences through 

f p;,^, ifv, e5r(vO 

P{^^)={ (204) 

I 0, otherwise 

in an i.i.d. manner and index them as Wi{wi,Wi,li) where Wi G |l, . . . , 2"^*}, Wi G 
{1,...,2"^-} and k G {l,...,2"^"} for i = 1,2. RuRuLi and R{Vi) are related 
through 

R{Vi) = Ri + Ri + Li, i = l,2 (205) 



Furthermore, we set 

Li + L2 = I{Vi; V2) + e (206) 



to ensure that for given pairs {wi,wi) and (^2,1^2), we can find a jointly typical pair 
(vi(wi, wi, h),Y2{w2, W2, k)) for some h, h- 

2. For each (wi, W2), the transmitter randomly picks {wi, W2) and finds a pair (vi(wi, iwi, /i), 
V2(w2, W2, ^2)) that is jointly tj^ical. Such a pair exists with high probability due to 
(12061) . Then, given this pair of (vi,V2), the transmitter generates its channel inputs 
through nr=i^'(^il^i,i'^2,i)- 

3. User j generates 2"^^°'^ length-n sequences u^ through p{vij) = Y[i=iPi'^j,i) ^^"^ labels 
them as Uj{sj^i) where Sj^i G {1, . . . , 2"^0'j} where j = 1, 2. 
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4. For each Uj{sj^i), user j generates 2"^^ length-n sequences through p{yj\\ij) — 
IYi=iPiyj,i\'^j,i) indexes them as yj(^j,i|sj,j) where Zj^i e {1, . . . , 2"^^}, j = 1, 2. 

5. For each Uj{sj^i), user j generates length-n sequences x^- through p(xj|uj) = 
YYi=iPi^i,i\'^j,i) indexes them as yij{tj^i\sj^i) where tj^i G {1, . . . ,2"^°-i}, j — 1,2. 

Partitioning: 

• Partition 2"^^ into cells S'^^. , where e {1, . . . , 2"^-^ }, j = 1, 2. 
Encoding: 

The transmitter sends x corresponding to the pair {wi, W2). User j sends Xj{tj^i\sj^i) if the 
estimate of yj{i — l), i.e., falls into S'^^ . and tj^j is chosen randomly from {1, . . . , 2"^°.^}. 

The use of many Xj(tj for actual help signal Uj{sj^i) aims to confuse the other user and 
to decrease its decoding capability. 
Decoding: 

We only consider decoding at user 1. Final expressions regarding user 2 will follow due 
to symmetry. 

1. User 1 seeks a unique jointly typical pair of (yi(i), U2(s2,i)) which can be found with 
vanishingly small error probability if 

Ro,2 < I{U2;Y,\X,) (207) 

2. User 1 decides on yi (2^1,1 by looking for a jointly typical pair (y 1 (2^1,1 1 yi(i), 
U2(s2,i), xi(ti^j|si^j)) which can be ensured to exist if 

^i>/(^'i;l^i|t/i,t^2,^i) (208) 

3. User 1 employs list decoding to decode y2(-Z2,i-i|s2,i-i)- It first calculates its ambiguity 
set as 

jC (y2(z2,i-i\s2,i-i)) = {y2 (2:2,^-1 1 S2,j-i) : (y2(2;2,i-i|s2,j-i),yi(i - 1)) is jointly typical} 

(209) 

and then takes its intersection with Sg^ i which results in a unique and correct inter- 
section point if 

R2 < I{Y2;Y,\U2,X,) + R^,2 < I{Y2,U2;Yi\X,) (210) 

4. User 1 decides that Vi(wi Wi^i^i, /i,i-i) is received if there exists a unique jointly typ- 
ical pair (vi(t(;i,j_i,i()i,j_i,/i,j_i),yi(i - I),y2(-22,i-i|s2,i-i)) which can be found with 
vanishingly small error probability if 

R(Vi) < I(Vi;Y,,Y2\X,,U2) (211) 
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Equivocation computation: 

Similar to the previous proofs, we treat eacli case separately. Due to symmetry, we only 
consider user 1. If the rate of user 1 is such that 

Ri > I{Vi; %\Xi, U2) - I{Vi; Y2, Yi\X2, V2, Ui) - I{V,; V2) (212) 

then we select the total number of codewords as 

R{V,) = I{V,;Y,,Y2\X,,U2) (213) 

which implies that 

Ri + L,< I{V,; Y2, Yi\X2, V2, U,) + I{V,; V2) (214) 

The equivocation rate can be bounded as follows, 

H{W,\Y,^,X^) > H{W,\Y,\X^,Y,^,V,^,U^) (215) 

= H{W^, Y,\ y^", ^"1^2, U^) - HiY,\ Y^, ^"1^2, U^) (216) 

= H{W,, V;", Y^, Y,\ V,-\Xl U^) - HiVI'lW,, Y,\ f^", X^ U^) 

-H{Y,^,Yr,V,^\XlU^) (217) 
= HiV.-lXl U^) + HiWu 1^2", V,-\Xl f/f , V,-) 

- HiV.^lWi, Y,\ n", X^, f/f) - HiY,^, Y,\ V2''\Xl f/f) (218) 
> HiV^'lX^, f/f) - /(Vi"; Y^, Y^, V^\X^, U'l) 

- H{VnW,, Y^, Fi", f/r) (219) 

We treat each term in fl219p separately. The first term is 

H{VnXli, t/f) = H{V^) = nR{V,) = nI{V^- Fi, fal^i, U2) (220) 

where the first equality is due to the independence of and {X2, f/"), the second equahty 
follows from the fact that can take 2"-^'^^i) values with equal probability and the last 
equality is due to our choice in ( 1213p . The second term of ( 1219P can be bounded as 

I{y^- Y^, y,", ^"1X2", f/r) < nliVv, Y2, Yi, V2\X2, Ui) + nen (221) 

following Lemma 3 of [10]. To bound the last term of ( 1219^ . we consider the case that 
user 2 is trying to decode given the side information Wi = wi. Since can take 
2n{i(Vi;Y2Xi\X2,V2,Ui)+i{VuV2)) valucs at most, user 2 can decode with vanishingly small 
error probability as long as this side information is available. Hence, the use of Fano's 
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lemma yields 



H{VnW^, Y^, Y^, V^, X^, f/r) < e„ (222) 

Plugging ([220D, ([22TD, ([222]) into we get 

H{W^\Y^, X^) > nI{V,; Y,, %\X^, U^) - nI{V^- Y^, % V-,\X^, U,) - ne^ (223) 
= nI{Vi; Fi, U2) - nI{Vi; F2, ^1^2, V2, f/i) - nI{Vi; V2) - nen (224) 

where f l224p follows from the independence of {X2,Ui) and (Vi,V2), i.e., /(Vi; V2IX2, ^1) 

= W;^2). 

For the other case, i.e., if the rate of user 1 is such that 

Ri < I{Vi; Fi, Y2\X^, U2) - I{V,; Y2, Y,\X2, V2, f/i) - I{V,; V2) (225) 
we select the total number of codewords as 

R{V,) = R, + I{V,- Y2, Y,\X2, V2, U,) + I{V,- V2) (226) 
and following the same lines of computation, we can show that 

H{Wi\Y^, X^) > nRi - nen (227) 

completing the proof. 
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